ius/mailAdmin: comparison group.pm

equal deleted inserted replaced

-:05d5ada37387
+:36aca6fb0ab8
 package group;
 # © Heiko Schlittermann
 # $Id$
 # $URL$
 use strict;
 use warnings;
 use Net::LDAP;
-use Net::LDAP::Constant qw(LDAP_ALREADY_EXISTS LDAP_NO_SUCH_OBJECT LDAP_TYPE_OR_VALUE_EXISTS);
+use Net::LDAP::Constant
+qw(LDAP_ALREADY_EXISTS LDAP_NO_SUCH_OBJECT LDAP_TYPE_OR_VALUE_EXISTS);
 use Net::LDAP::Entry;
 #use Cyrus::IMAP::Admin;
 use Text::Wrap;
 use password;
 my $Cf;
-my ($ldap, $ubase, $abase, $gbase);
+my ( $ldap, $ubase, $abase, $gbase );
 my ($imap);
-END { $imap and $imap = undef; };
+END { $imap and $imap = undef; }
 sub _add();
 sub _list();
 sub _delete();
 sub uniq(@);
 sub import(@) {
 $Cf = shift;
 require constant;
-import constant OU_ACCOUNTS => $Cf->ldap_ou_accounts;
+import constant OU_ACCOUNTS          => $Cf->ldap_ou_accounts;
-import constant OU_ALIASES => $Cf->ldap_ou_aliases;
+import constant OU_ALIASES           => $Cf->ldap_ou_aliases;
-import constant OU_GROUPS => $Cf->ldap_ou_groups;
+import constant OU_GROUPS            => $Cf->ldap_ou_groups;
-import constant OC_RECIPIENT => $Cf->ldap_oc_recipient;
+import constant OC_RECIPIENT         => $Cf->ldap_oc_recipient;
-import constant OC_ACCESSGROUP => $Cf->ldap_oc_accessgroup;
+import constant OC_ACCESSGROUP       => $Cf->ldap_oc_accessgroup;
-import constant AT_PRIMARYADDRESS => $Cf->ldap_at_primaryaddress;
+import constant AT_PRIMARYADDRESS    => $Cf->ldap_at_primaryaddress;
-import constant AT_ADDRESS => $Cf->ldap_at_address;
+import constant AT_ADDRESS           => $Cf->ldap_at_address;
-import constant AT_GROUP => $Cf->ldap_at_group;
+import constant AT_GROUP             => $Cf->ldap_at_group;
 import constant AT_FORWARDINGADDRESS => $Cf->ldap_at_forwardingaddress;
-import constant AT_MEMBERUID => "memberUid";
+import constant AT_MEMBERUID         => "memberUid";
 $gbase = OU_GROUPS . "," . $Cf->ldap_base;
 $ubase = OU_ACCOUNTS . "," . $Cf->ldap_base;
 $abase = OU_ALIASES . "," . $Cf->ldap_base;
 }
 sub run($) {
 # Eigentlich brauchen wir für alles imap und ldap
 $ldap = new Net::LDAP $Cf->ldap_server or die;
-my $r = $ldap->bind($Cf->ldap_bind_dn,
+my $r = $ldap->bind( $Cf->ldap_bind_dn,
-	password => $Cf->ldap_password || $ENV{LDAP_PASS} || password::ask("LDAP (". $Cf->ldap_bind_dn .") password: "));
+password => $Cf->ldap_password
+|| $ENV{LDAP_PASS}
+|| password::ask( "LDAP (" . $Cf->ldap_bind_dn . ") password: " ) );
 die $r->error, "\n" if $r->code;
 $imap = new Cyrus::IMAP::Admin or die $@;
-$imap->authenticate(-server => $Cf->imap_server, -user => $Cf->imap_admin,
+$imap->authenticate(
-	-password => $Cf->imap_password || $ENV{IMAP_PASS} || password::ask("IMAP (". $Cf->imap_admin .") password: "))
+-server   => $Cf->imap_server,
-or die $@;
+-user     => $Cf->imap_admin,
+-password => $Cf->imap_password
+|| $ENV{IMAP_PASS}
-if ($Cf->list) { _list() }
+|| password::ask( "IMAP (" . $Cf->imap_admin . ") password: " )
-elsif ($Cf->add) { _add() }
+) or die $@;
-elsif ($Cf->delete) { _delete() }
-elsif ($Cf->modify) { _modify() }
+if    ( $Cf->list )   { _list() }
-else { die "Need action (--add|--modify|--list|--delete)\n" };
+elsif ( $Cf->add )    { _add() }
+elsif ( $Cf->delete ) { _delete() }
+elsif ( $Cf->modify ) { _modify() }
+else { die "Need action (--add|--modify|--list|--delete)\n" }
 }
 sub _add() {
-# Beim Hinzufügen tragen wir nur das unbedingt notwendige
-# ein.  Wenn es schon eine mailPrimaryAddress gibt oder eine
+# Beim Hinzufügen tragen wir nur das unbedingt notwendige
-# mail, machen wir gar nichts.
+# ein.  Wenn es schon eine mailPrimaryAddress gibt oder eine
-# Ansonsten:
+# mail, machen wir gar nichts.
-# uid wird hinzugefügt
+# Ansonsten:
-# cn, sn bleiben unangetastet
+# uid wird hinzugefügt
-# Wenn die mailbox-Option gesetzt ist, wird die
+# cn, sn bleiben unangetastet
-# IMAP-Mailbox angelegt.
+# Wenn die mailbox-Option gesetzt ist, wird die
+# IMAP-Mailbox angelegt.
 die "Need group name for creation\n" if not @ARGV;
 my $group = shift @ARGV;
-my @members = split /,/, $Cf->members||"";
+my @members = split /,/, $Cf->members || "";
 my $dn = "cn=$group,$gbase";
 my $r;
 verbose("$group:\n");
 verbose("\t$dn...");
-$r = $ldap->search(base => $gbase, filter => "(cn=$group)");
+$r = $ldap->search( base => $gbase, filter => "(cn=$group)" );
 die $r->error if $r->code;
 die "entries not expected" if $r->count > 1;
 my $e;
-if ($r->count) {
+if ( $r->count ) {
-	$e = $r->shift_entry;
+$e = $r->shift_entry;
 } else {
-	$e = new Net::LDAP::Entry;
+$e = new Net::LDAP::Entry;
-	# Jetzt eine neue ID finden
-	foreach ($Cf->gid_min .. $Cf->gid_max) {
+# Jetzt eine neue ID finden
-	    # ist einfach eine lineare Suche, im Augenblick weiß ich nichts
+foreach ( $Cf->gid_min .. $Cf->gid_max ) {
-	    # clevereres
-	    my $r = $ldap->search(base => $gbase,
+# ist einfach eine lineare Suche, im Augenblick weiß ich nichts
-		filter => "(gidNumber=$_)",
+# clevereres
-		attrs => []);
+my $r = $ldap->search(
-	    if ($r->count == 0) {
+base   => $gbase,
-		$e->add(gidNumber => $_);
+filter => "(gidNumber=$_)",
-		last;
+attrs  => []
-	    }
+);
-	}
+if ( $r->count == 0 ) {
-	$e->dn($dn);
+$e->add( gidNumber => $_ );
-	$e->add(cn => $group);
+last;
 }
+}
-grep /^CYRUS MAIL ACCESS GROUP/, $e->get("description") or $e->add(description => "CYRUS MAIL ACCESS GROUP");
+$e->dn($dn);
+$e->add( cn => $group );
-if (defined $Cf->description) {
+}
-	my @d = map { s/^(CYRUS MAIL ACCESS GROUP).*/"$1: ".$Cf->description/eg; $_ } $e->get("description");
-	$e->replace(description => \@d);
+grep /^CYRUS MAIL ACCESS GROUP/, $e->get("description")
-}
+or $e->add( description => "CYRUS MAIL ACCESS GROUP" );
-$e->replace(objectClass => [uniq $e->get("objectClass"), OC_ACCESSGROUP, "posixGroup"]);
+if ( defined $Cf->description ) {
-$e->replace((AT_MEMBERUID) => [uniq $e->get(AT_MEMBERUID), @members]) if @members;
+my @d =
+map { s/^(CYRUS MAIL ACCESS GROUP).*/"$1: ".$Cf->description/eg; $_ }
+$e->get("description");
+$e->replace( description => \@d );
+}
+$e->replace( objectClass =>
+[ uniq $e->get("objectClass"), OC_ACCESSGROUP, "posixGroup" ] );
+$e->replace( (AT_MEMBERUID) => [ uniq $e->get(AT_MEMBERUID), @members ] )
+if @members;
 $r = $e->update($ldap);
 die $r->error if $r->code;
 verbose("ok");
 verbose("\n");
 }
 sub _modify() {
-# Auch hier gehen wir davon aus, daß die dn direkt aus dem User-Namen folgt:
-# dn: uid=USER,...
+# Auch hier gehen wir davon aus, daß die dn direkt aus dem User-Namen folgt:
+# dn: uid=USER,...
 my (@groups) = @ARGV or die "Need groupname(s)\n";
-my $r = $ldap->search(base => $gbase,
+my $r = $ldap->search(
-	filter => $_ = "(&(objectClass=".OC_ACCESSGROUP.")(|" . join("", map { "(cn=$_)" } @ARGV) . "))");
+base   => $gbase,
+filter => $_ =
+"(&(objectClass="
+. OC_ACCESSGROUP . ")(|"
+. join( "", map { "(cn=$_)" } @ARGV ) . "))"
+);
 die $r->error if $r->code;
 die "No entries found.\n" if $r->count == 0;
-while (my $e = $r->shift_entry) {
+while ( my $e = $r->shift_entry ) {
-	my $r;
+my $r;
-	my $group = $e->get_value("cn");
+my $group = $e->get_value("cn");
-	my $dn = $e->dn;
+my $dn    = $e->dn;
-	my $modified = 0;
+my $modified = 0;
-	verbose "$group:";
+verbose "$group:";
-	verbose "\n\t$dn...";
+verbose "\n\t$dn...";
-	if (defined $Cf->members) {
+if ( defined $Cf->members ) {
-	    my @m = split /,/, $Cf->members;
+my @m = split /,/, $Cf->members;
-	    grep { /^[+-]/ } @m or $e->delete(AT_MEMBERUID)
+grep { /^[+-]/ } @m
-		if $e->get_value(AT_MEMBERUID);
+or $e->delete(AT_MEMBERUID)
+if $e->get_value(AT_MEMBERUID);
-	    foreach my $m (@m) {
-		if ($m =~ s/^-//) {
+foreach my $m (@m) {
-		    $e->delete((AT_MEMBERUID) => [$m])
+if ( $m =~ s/^-// ) {
-		} else {
+$e->delete( (AT_MEMBERUID) => [$m] );
-		    $m =~ s/^\+//;
+} else {
-		    $e->add((AT_MEMBERUID) => [$m])
+$m =~ s/^\+//;
-		}
+$e->add( (AT_MEMBERUID) => [$m] );
-	    }
+}
-	    $modified++;
+}
-	}
+$modified++;
+}
-	if (defined $Cf->description) {
-	    my @d = map { s/^(CYRUS MAIL ACCESS GROUP).*/"$1: ".$Cf->description/eg; $_ } $e->get("description");
+if ( defined $Cf->description ) {
-	    $e->replace(description => \@d);
+my @d = map {
-	    $modified++;
+s/^(CYRUS MAIL ACCESS GROUP).*/"$1: ".$Cf->description/eg;
-	}
+$_
+} $e->get("description");
-	$e->dump if $Cf->debug;
+$e->replace( description => \@d );
+$modified++;
-	if ($modified) {
+}
-	    $r = $e->update($ldap);
-	    die $r->error.$r->code if $r->code;
+$e->dump if $Cf->debug;
-	}
+if ($modified) {
-	verbose "ok\n";
+$r = $e->update($ldap);
+die $r->error . $r->code if $r->code;
-	print "\n";
+}
+verbose "ok\n";
+print "\n";
 }
 }
 sub _delete() {
-# Wir gehen davon aus, daß es einen dn uid=USER,ou=.... gibt, den wir löschen können.
-# Wir löschen den kompletten Container.  Es kann natürlich sein, daß er noch jemand anders gehört.
+# Wir gehen davon aus, daß es einen dn uid=USER,ou=.... gibt, den wir löschen können.
-# Dann ist das Pech.  Um es besser zu haben, müßten wir für alles unsere eigenen
+# Wir löschen den kompletten Container.  Es kann natürlich sein, daß er noch jemand anders gehört.
-# Objektklassen haben...
+# Dann ist das Pech.  Um es besser zu haben, müßten wir für alles unsere eigenen
+# Objektklassen haben...
-if (!@ARGV) {
-	print "Group: ";
+if ( !@ARGV ) {
-	chomp($_ = <>);
+print "Group: ";
-	@ARGV = ($_);
+chomp( $_ = <> );
+@ARGV = ($_);
 }
 #my $filter = "(&((cn=%s)(objectClass=".OC_ACCESSGROUP.")))";
-my $r = $ldap->search(base => $gbase,
+my $r = $ldap->search(
-	filter => "(&(objectClass=".OC_ACCESSGROUP.")(|" . join("", map { "(cn=$_)" } @ARGV) . "))",
+base   => $gbase,
-	attrs => [AT_MEMBERUID, "cn"]);
+filter => "(&(objectClass="
+. OC_ACCESSGROUP . ")(|"
-if ($r->count == 0) {
+. join( "", map { "(cn=$_)" } @ARGV ) . "))",
-	verbose "No objects found\n";
+attrs => [ AT_MEMBERUID, "cn" ]
-	return;
+);
-}
+if ( $r->count == 0 ) {
-while (my $e = $r->shift_entry) {
+verbose "No objects found\n";
-	my $dn = $e->dn;
+return;
-	verbose $dn;
+}
-	my $r = $ldap->delete($dn);
+while ( my $e = $r->shift_entry ) {
-	if ($r->code == LDAP_NO_SUCH_OBJECT) {
+my $dn = $e->dn;
-	    verbose("doesn't exist");
+verbose $dn;
-	} elsif ($r->code == 0) {
+my $r = $ldap->delete($dn);
-	    verbose(" ok");
-	} else {
+if ( $r->code == LDAP_NO_SUCH_OBJECT ) {
-	    die $r->error;
+verbose("doesn't exist");
-	}
+} elsif ( $r->code == 0 ) {
-	verbose("\n");
+verbose(" ok");
+} else {
+die $r->error;
+}
+verbose("\n");
 }
 }
 sub _list() {
 my $filter;
 @ARGV = ("*") unless @ARGV;
 #$filter = "(|" . join("", map { "(uid=$_)" } @ARGV) . ")";
-$filter = "(objectClass=".OC_ACCESSGROUP.")";
+$filter = "(objectClass=" . OC_ACCESSGROUP . ")";
 my $r = $ldap->search(
-	filter => $filter,
+filter => $filter,
-	base => $gbase,
+base   => $gbase,
-	attrs => [AT_MEMBERUID, qw/cn description/],
+attrs  => [ AT_MEMBERUID, qw/cn description/ ],
 );
 die $r->error if $r->code;
+while ( my $e = $r->shift_entry ) {
-while (my $e = $r->shift_entry) {
+my $cn    = $e->get_value("cn");
-	my $cn = $e->get_value("cn");
+my $descr = $e->get_value("description");
-	my $descr = $e->get_value("description");
+my @uids  = $e->get_value(AT_MEMBERUID);
-	my @uids = $e->get_value(AT_MEMBERUID);
+print "$cn: ($descr)\n";
-	print "$cn: ($descr)\n";
+print "\t", join "\n\t", @uids;
-	print "\t", join "\n\t", @uids;
+print "\n";
-	print "\n";
 }
 }
 sub verbose(@) {
 printf STDERR @_;
 my %x;
 @x{@_} = ();
 return keys %x;
 }
-{   my @pw;
+{
-sub _mkpw($) {
+my @pw;
-my $in = $_[0];
+sub _mkpw($) {
-return $in unless $in and $in eq "{pwgen}";
+my $in = $_[0];
-if (!@pw) {
+return $in unless $in and $in eq "{pwgen}";
-	chomp(@pw = `pwgen 8 10 2>/dev/null|| mkpasswd`);
-	die "pwgen/mkpasswd: $!" if $?;
+if ( !@pw ) {
-}
+chomp( @pw = `pwgen 8 10 2>/dev/null|| mkpasswd` );
-return shift @pw;
+die "pwgen/mkpasswd: $!" if $?;
+}
-} }
+return shift @pw;
+}
+}
 1;
 # vim:sts=4 sw=4 aw ai sm nohlsearch:

branch	foerste
changeset 48	36aca6fb0ab8
parent 44	35441e1ae083
child 75	63b7c7fcd0cb